VPN mtu problem

  • Thread starter Thread starter Simon Platt
  • Start date Start date
S

Simon Platt

I've got a quick question. We've got some VPN users
having problems
connecting to a citrix server due to the mtu sizes.
Packets from the server
are 1460 and the maximum packet size accepted by the VPN
users is 1400.
When the client receives a packet with the
defragmentation bit set it tries
to send an ICMP packet back to the server requesting
fragmentation, however
there is a firewall blocking this.

Do you know how to set the df bit on or off for the
server NIC (W2K)?
 
There isn't a way to do this. You need to either allow the ICMP message to reach the server or reduce the server's MTU setting.

Thank you,
Mike Johnston
Microsoft Network Support
--

This posting is provided "AS IS" with no warranties, and confers no rights. Use of included script samples are subject to the
terms specified at
http://www.microsoft.com/info/cpyright.htm

Note: For the benefit of the community-at-large, all responses to this message are best directed to the newsgroup/thread from
which they originated.
 
Mike,

Thanks for the speedy reply.

Regards

Simon
-----Original Message-----
There isn't a way to do this. You need to either allow
Click to expand...
the ICMP message to reach the server or reduce the
server's MTU setting.
Thank you,
Mike Johnston
Microsoft Network Support
Click to expand...
confers no rights. Use of included script samples are
subject to the
terms specified at
http://www.microsoft.com/info/cpyright.htm

Note: For the benefit of the community-at-large, all
Click to expand...
responses to this message are best directed to the
newsgroup/thread from
 
Back
Top